Setting up SSH

By default, ssh is disabled on CSAIL Debian machines. There are five steps you need to take to enable it:

  • First, ensure that your machine has a stable hostname (that hostname.csail.mit.edu does not contain "dynamic".) If it does, register a hostname first in WebDNS, then dhreg.
  • Ask the sysadmins to generate a keytab for your host (e-mail help@csail.mit.edu with the name of your machine)
  • Install the keytab. From the machine:
sudo install -o root -g root -m 600 /afs/csail/group/tig/keytabs/$USER/$HOSTNAME.keytab \
    /etc/krb5.keytab
(If you are using tcsh, substitute the name of your machine for $HOSTNAME.)
  • Remove the keytab from afs:
rm /afs/csail.mit.edu/group/tig/keytabs/$USER/$HOSTNAME.keytab
  • (Re)start sshd:
  
sudo rm /etc/ssh/sshd_not_to_be_run
sudo /etc/init.d/ssh restart